Topics / #php-security

Php-security projects on GitHub

As of , the most-starred Php-security projects on GitHub are php2shell-poc (1.8K stars), php2shell-checker (1.4K stars) and php2shell-CVE-2026-109618-CVE-2026-109619-PoC (1K stars). GitHub.Locker tracks 5 Php-security repositories with 4.5K stars combined. The fastest-growing on October 25 was php2shell-poc, with +41 stars in a day.

5Projects
4.5KStars in total
+102Stars in a day
Browse in the catalog →github.com/topics/php-security ↗

Hot right now

Most stars gained in a day · Oct 25

+41

php2shell-poc

ikow/php2shell-poc · ★ 1.8K

This is a security research repository documenting five pre-auth remote code execution chains in PHP's session.upload_progress and Zend engine internals (CVE-2026-109618 and CVE-2026-109619), with proof-of-concept exploits and ready-made detection rules.

+26

php2shell-CVE-2026-109618-CVE-2026-109619-PoC

eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC · ★ 1K

This repository documents two critical pre-auth remote code execution vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) and ships mitigation scripts, WAF rules, and a source patch; a working proof-of-concept exploit is still in development.

+24

php2shell-checker

openai/php2shell-checker · ★ 1.4K

A command-line tool (plus matching Codex skills) that checks whether a PHP website or a local PHP binary is running a version vulnerable to php2shell, based on reported version numbers.

+7

php2shell

devploit/php2shell · ★ 161

PHP2Shell is a research toolkit for CVE-2026-109618 / CVE-2026-109619, a pre-auth remote code execution bug in PHP's session.upload_progress feature on mod_php (Apache). It packages a version-aware dispatcher, per-build exploit profiles, reproducible Docker labs, a heap-calibration factory and detection guidance around the public proof-of-concept research by 9bie.

The all-time top

5 projects · by stars

  1. #1 · ikow/php2shell-poc

    php2shell-poc

    This is a security research repository documenting five pre-auth remote code execution chains in PHP's session.upload_progress and Zend engine internals (CVE-2026-109618 and CVE-2026-109619), with proof-of-concept exploits and ready-made detection rules.

    1.8K
  2. #2 · openai/php2shell-checker

    php2shell-checker

    A command-line tool (plus matching Codex skills) that checks whether a PHP website or a local PHP binary is running a version vulnerable to php2shell, based on reported version numbers.

    1.4K
  3. #3 · eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

    php2shell-CVE-2026-109618-CVE-2026-109619-PoC

    This repository documents two critical pre-auth remote code execution vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) and ships mitigation scripts, WAF rules, and a source patch; a working proof-of-concept exploit is still in development.

    1K
  1. 4

    php2shell

    161devploit/php2shell · Python

    PHP2Shell is a research toolkit for CVE-2026-109618 / CVE-2026-109619, a pre-auth remote code execution bug in PHP's session.upload_progress feature on mod_php (Apache). It packages a version-aware dispatcher, per-build exploit profiles, reproducible Docker labs, a heap-calibration factory and detection guidance around the public proof-of-concept research by 9bie.

  2. 5

    php_uploadprogress_guard

    151HOSTED-POWER/php_uploadprogress_guard · C

    It is a small PHP extension (hpuploadprogressguard) that mirrors Patch PHP's official fix for the CVE-2026-109618 / CVE-2026-109619 php2shell vulnerabilities component by component, plus a related unserialize() use-after-free and a SimpleXML double-free, so an unpatched PHP engine is protected without recompiling PHP or changing application behavior.

Often tagged together